PulseGRC Risk Manager


Document business scope

  • Create the organisation structure
  • Document business process including activities. Identify process and activity owners. Order activities under business processes
  • Document corporate objectives, grade them based on their overall impact, identify owners and departments responsible for achieving these objectives
  • Identify critical IT and non-IT assets that may be exposed to risk.

Identify Risk

  • Identify Loss Events and categorise them
  • Quantify the impact of loss events
  • link loss events to risks

Assess Risk

  • Make a qualitative assessment of risk based on impact and probability. The software automatically calculates the weighted inherent risk and residual risk
  • No constraint on the number of impact categories
  • Automatically plots risks against the corporate risk appetite

Manage Risk

  • Identify relevant controls that mitigates risk
  • Document the implementation and operating cost of controls to see how they measure up against the cost of risk
  • Manage residual risk